Laravel Credentials Package for Encrypted Application Secrets

Published on by

Laravel Credentials Package for Encrypted Application Secrets image

Trust me, erasing secret data from version control is open-heart surgery for your VCS you never want to perform. On the other hand, having secrets in version control is helpful to keep track of changes made, given that you do so carefully. Enter Laravel Credentials.

Laravel Credentials is a new package by Marcel Pociot (of Botman fame) to help you manage sensitive data securely in your Laravel project.

A couple of benefits include:

  • Credentials are encrypted, so nobody can read them without the key (which you should not store in version control)
  • Encrypted credentials are in version control, so you have a history of change
  • You can deploy credential changes along with code changes
  • Your secrets exist in one location

Since credentials are encrypted and require a key, how do you edit them with this package?

Editing Laravel Credentials

To edit your credentials, you use an artisan command provided by the Laravel Credentials package:

php artisan credentials:edit

Once you update the credentials, the new encrypted version gets stored in the credentials file (by default the file lives at config/credentials.php.enc. The credentials file is accessible via helpers.

Using Credentials

To access encrypted credentials, you use the provided credentials() helper function:

$credential = credentials('api-password');

Installation

To install this package and start using it, install it via composer with:

composer require beyondcode/laravel-credentials

You can optionally publish the config file with the following:

php artisan vendor:publish --provider="BeyondCode\Credentials\CredentialsServiceProvider" --tag="config"

Learn More

Learn more about the Laravel Credentials package and access the source code from beyondcode/laravel-credentials on GitHub.

You might already be familiar with the encrypted file approach for sensitive data if you’ve used Ansible Vault.

Paul Redmond photo

Staff writer at Laravel News. Full stack web developer and author.

Cube

Laravel Newsletter

Join 40k+ other developers and never miss out on new tips, tutorials, and more.

Laravel Forge logo

Laravel Forge

Easily create and manage your servers and deploy your Laravel applications in seconds.

Laravel Forge
Tinkerwell logo

Tinkerwell

The must-have code runner for Laravel developers. Tinker with AI, autocompletion and instant feedback on local and production environments.

Tinkerwell
Cut PHP Code Review Time & Bugs into Half with CodeRabbit logo

Cut PHP Code Review Time & Bugs into Half with CodeRabbit

CodeRabbit is an AI-powered code review tool that specializes in PHP and Laravel, running PHPStan and offering automated PR analysis, security checks, and custom review features while remaining free for open-source projects.

Cut PHP Code Review Time & Bugs into Half with CodeRabbit
Join the Mastering Laravel community logo

Join the Mastering Laravel community

Connect with experienced developers in a friendly, noise-free environment. Get insights, share ideas, and find support for your coding challenges. Join us today and elevate your Laravel skills!

Join the Mastering Laravel community
Laravel Idea for PhpStorm logo

Laravel Idea for PhpStorm

Ultimate PhpStorm plugin for Laravel developers, delivering lightning-fast code completion, intelligent navigation, and powerful generation tools to supercharge productivity.

Laravel Idea for PhpStorm
Kirschbaum logo

Kirschbaum

Providing innovation and stability to ensure your web application succeeds.

Kirschbaum
Shift logo

Shift

Running an old Laravel version? Instant, automated Laravel upgrades and code modernization to keep your applications fresh.

Shift
Bacancy logo

Bacancy

Supercharge your project with a seasoned Laravel developer with 4-6 years of experience for just $2500/month. Get 160 hours of dedicated expertise & a risk-free 15-day trial. Schedule a call now!

Bacancy
Lucky Media logo

Lucky Media

Get Lucky Now - the ideal choice for Laravel Development, with over a decade of experience!

Lucky Media
Lunar: Laravel E-Commerce logo

Lunar: Laravel E-Commerce

E-Commerce for Laravel. An open-source package that brings the power of modern headless e-commerce functionality to Laravel.

Lunar: Laravel E-Commerce
LaraJobs logo

LaraJobs

The official Laravel job board

LaraJobs
SaaSykit: Laravel SaaS Starter Kit logo

SaaSykit: Laravel SaaS Starter Kit

SaaSykit is a Multi-tenant Laravel SaaS Starter Kit that comes with all features required to run a modern SaaS. Payments, Beautiful Checkout, Admin Panel, User dashboard, Auth, Ready Components, Stats, Blog, Docs and more.

SaaSykit: Laravel SaaS Starter Kit
MongoDB logo

MongoDB

Enhance your PHP applications with the powerful integration of MongoDB and Laravel, empowering developers to build applications with ease and efficiency. Support transactional, search, analytics and mobile use cases while using the familiar Eloquent APIs. Discover how MongoDB's flexible, modern database can transform your Laravel applications.

MongoDB

The latest

View all →
Fusion Developer Preview is released: Write PHP inside your Vue and React components image

Fusion Developer Preview is released: Write PHP inside your Vue and React components

Read article
Enum-Powered Route Permissions in Laravel image

Enum-Powered Route Permissions in Laravel

Read article
NativePHP for iOS image

NativePHP for iOS

Read article
Using Relative Date Helpers in Laravel's Query Builder image

Using Relative Date Helpers in Laravel's Query Builder

Read article
Fine-tuning Pagination Links in Laravel image

Fine-tuning Pagination Links in Laravel

Read article
Relative Date Helpers in Laravel 11.42 image

Relative Date Helpers in Laravel 11.42

Read article